Topic
What AI tools actually change for builders and merchants - costs, capabilities, and where they help or hurt.
Tony Dinh launched a ChatGPT frontend five days after OpenAI opened its API and published the revenue at every stage. The second million is coming from companies, not from the customers who built the first.
A misconfiguration left evaluation machines with live internet access, and two organisations both believed they were isolated. Outbound isolation is testable in under a minute, and most teams have never run the test.
A benchmark put policy documents of 20 to 124 pages in front of thirty model configurations and graded 824 rules programmatically. The best configuration satisfied every rule in 36.2% of trials. Sort your own rules into advisory and binding, then move the binding ones out of the markdown.
The documented ceilings: 300 seconds on Vercel Hobby, 900 on AWS Lambda, 30 seconds of CPU by default on a paid Cloudflare Worker. Here are all four side by side, the run length that picks your runtime, and the request shape that makes the ceiling stop mattering.
OpenJDK's interim policy bans model-generated content in code, email, wiki pages and issues, while permitting private use for debugging. QEMU, Gentoo, NetBSD and Apache each drew the line somewhere else, and the reason is provenance rather than quality.
Danny Postma wrapped a public image model around one job people already pay for. The programme that pays reviewers to recommend it brings in a reported $50,000 a month by itself.
Shared conversations and Artifacts turned up in search results this week. On a domain you do not own you cannot set a noindex tag, which leaves exactly two levers. Here are the operators to run and the revoke path for each surface.
Hugging Face says the intrusion started in a dataset loader and that public models are clean. The useful response is not panic: it is pinning every download to a full commit hash, scoping tokens per app, and refusing pickled weights.
The 2026-07-28 revision removes initialize, the Mcp-Session-Id header and stream resumability, and makes server/discover mandatory. What replaced each of them, and the order to work through your own server.
Provider cost reports group by workspace, model and day, never by your customer. The three layers of instrumentation that produce a per-customer number, with the exact fields to send and a worked conversion from one usage row to dollars.
The codex-security CLI is open source and gated to approved customers. Here is what a one-to-five person team can install this afternoon instead, with the free-tier limits and per-contributor costs that decide it.
Text a human never sees is text a model still obeys. If your product summarises uploaded files, tickets or web pages, the exposure is not the hidden instruction, it is what the model is allowed to do after reading it.
Kimi K3's open release landed on Hugging Face today. Published GPU rental and API prices put the crossover at roughly 4.2 billion tokens a month against Kimi's own API and 46 billion against DeepSeek V4 Pro. Here is the arithmetic, with the duty-cycle and caching adjustments most comparisons skip.
A report this week described the relay market that proxies frontier model access at a fraction of list price. The arithmetic says where the money comes from, and Anthropic's terms say who pays when a key leaks.
One switch became three, free on every plan, with new-domain defaults changing on 15 September. The Googlebot trade-off that makes one of the three expensive, a setting matrix by site type, and the exact dashboard path.
Article 50 of the EU AI Act applies from 2 August 2026. Which of the four duties attaches to you, the editorial-review exemption that takes most publishers out of scope, and why the headline 3% fine is the wrong number for a small company.
In August 2022, David Holz said Midjourney had about ten people, no investors, and was already profitable. Its product had no website to speak of. Users typed prompts into a public Discord channel.
In March 2014 a Dutch developer promised to launch one product a month for a year. A decade later he publishes six-figure monthly revenue from products he still builds alone.
In July 2025 the Swedish company Lovable announced $100 million in annual recurring revenue, roughly eight months after launch. The growth looks like an accident. The channels it came through were chosen deliberately.
OpenAI's worldwide outage this morning lasted about 50 minutes. The published uptime numbers say this is routine, the SLAs pay in credits, and a working fallback path is an afternoon of work rather than an architecture project.
Amazon told sellers this week to add metadata to images and A+ content showing photorealistic AI-generated people. The New York law behind it carries $1,000 and $5,000 penalties and reaches any seller whose listings are visible in the state.
Google's spam policies never mention AI writing as a violation on its own. The test is scale, purpose and value, and the neighbouring policies on thin affiliation and site reputation abuse catch small sites too.
DORA found AI adoption raises throughput and instability together. The fix is not another tool: it is a size ceiling, a written approval rule, and repository settings that enforce both.
Search Console gives you no AI Overviews breakdown, so stop waiting for one. A four-step routine using impressions versus clicks, GA4 referrals and crawler logs, plus what each control costs.